Dynamic query adjustment based on data protection configurations

Abstract

Aspects of the present disclosure relate to systems and methods for dynamically adjusting queries based on data protection configurations. In one example, a request for data is received from an application. The data is indexed in at least one of a first index database, a second index database and a third index database. A first key notification indicating a protection status of a personal device is received. A query is sent to each of the first index database, the second index database and the third index database for the requested data based on the protection status of the personal device. The requested data is loaded into the application. A second key notification indicating a change in the protection status of the personal device is received. At least some of the loaded data is removed from the application based on the change in the protection status of the personal device.

What is claimed is: 
     
       1. A computing apparatus comprising:
 at least one processor; and 
 memory storing program instructions that, when executed by the at least one processor, cause the computing apparatus to perform operations comprising:
 construct a first index database for indexing only data that is accessible when the computing apparatus has a first protection status, to the exclusion of data that is accessible when the computing apparatus has a second protection status, the first index database having a first data protection level, the first data protection level corresponding to the first protection status; 
 construct a second index database for indexing only data that is accessible when the computing apparatus has the second protection status, the second index database having a second data protection level, the second data protection level corresponding to the second data protection status; 
 encrypt the second index database based on the second data protection level; 
 identify data for indexing, where the data is classified as a data type from a plurality of data types; and 
 index the data identified for indexing in at least one of: the first index database and the second index database, based on the data type of the data. 
 
 
     
     
       2. The computing apparatus of  claim 1 , wherein the plurality of data types includes unprotected, protected until first unlock of the computing apparatus, and protected when the computing apparatus is locked. 
     
     
       3. The computing apparatus of  claim 2 , wherein the first data protection level provides access to data classified as the unprotected data type. 
     
     
       4. The computing apparatus of  claim 2 , wherein the second data protection level provides access to data classified as the protected until first unlock of the computing apparatus data type. 
     
     
       5. The computing apparatus of  claim 2 , wherein a third data protection level provides access to data classified as the protected when the computing apparatus is locked data type. 
     
     
       6. The computing apparatus of  claim 2 , wherein the operations further comprise:
 identify additional data for indexing, where the additional data is classified as at least one of the protected until first unlock of the computing apparatus data type and the protected when the computing apparatus is locked data type. 
 
     
     
       7. The computing apparatus of  claim 6 , wherein the operations further comprise:
 receive a key notification indicating that the second index database is not available for indexing the additional data; and 
 mark the additional data as delayed in an indexing queue. 
 
     
     
       8. The computing apparatus of  claim 7 , the operations further comprise:
 receive the key notification indicating that the second index database is available for indexing the additional data; and 
 index the additional data in the second index database when the additional data is classified as the protected until first unlock of the computing apparatus data type and the second index database is indicated as available for indexing the additional data. 
 
     
     
       9. A computer-implemented method, performed by a computing apparatus, for indexing data so as to be able to dynamically adjust to a query, the computer-implemented method comprising:
 constructing a first index database for indexing only data that is accessible when the computing apparatus has a first protection status, to the exclusion of data that is accessible when a computing apparatus performing the computer-implemented method has a second protection status, the first index database having a first data protection level, the first data protection level corresponding to the first protection status; 
 constructing a second index database for indexing only data that is accessible when the computing apparatus has the second protection status, the second index database having a second data protection level, the second data protection level corresponding to the second data protection status; 
 encrypt the second index database based on the second data protection level; 
 identify data for indexing, where the data is classified as a data type from a plurality of data types; and 
 index the data identified for indexing in at least one of: the first index database and the second index database, based on the data type of the data. 
 
     
     
       10. The method of  claim 9 , wherein the plurality of data types includes unprotected, protected until first unlock of the computing apparatus, and protected when the computing apparatus is locked. 
     
     
       11. The method of  claim 10 , wherein the first data protection level provides access to data classified as the unprotected data type. 
     
     
       12. The method of  claim 10 , wherein the second data protection level provides access to data classified as the protected until first unlock of the computing apparatus data type. 
     
     
       13. The method of  claim 10 , wherein a third data protection level provides access to data classified as the protected when the computing apparatus is locked data type. 
     
     
       14. The method of  claim 10 , further comprising:
 identifying additional data for indexing, where the additional data is classified as at least one of the protected until first unlock of the computing apparatus data type and the protected when the computing apparatus is locked data type. 
 
     
     
       15. The method of  claim 14 , further comprising:
 receiving a key notification indicating that the second index database having the second data protection level is not available for indexing the additional data; and 
 marking the additional data as delayed in an indexing queue. 
 
     
     
       16. The method of  claim 15 , further comprising:
 receiving the key notification indicating that the second index database is available for indexing the additional data; and 
 indexing the additional data in the second index database when the additional data is classified as the protected until first unlock of the computing apparatus data type and the second index database is indicated as available for indexing the additional data. 
 
     
     
       17. One or more computer readable storage media comprising program instructions, which, when executed by at least one processor, cause the at least one processor to:
 construct a first index database for indexing only data that is accessible when a computing apparatus has a first protection status, to the exclusion of data that is accessible when a computing apparatus has a second protection status, the first index database having a first data protection level, the first data protection level corresponding to the first protection status; 
 constructing a second index database for indexing only data that is accessible when the computing apparatus has the second protection status, the second index database having a second data protection level, the second data protection level corresponding to the second data protection status; 
 encrypt the second index database based on the second data protection level; 
 identify data for indexing, where the data is classified as a data type from a plurality of data types; and 
 index the data identified for indexing in at least one of: the first index database and the second index database, based on the data type of the data. 
 
     
     
       18. The computer readable storage media of  claim 17 , wherein the plurality of data types includes unprotected, protected until first unlock of the computing apparatus, and protected when the computing apparatus is locked. 
     
     
       19. The computer readable storage media of  claim 18 , wherein the program instructions stored on the one or more computer readable storage media, when executed, further cause the at least one processor to:
 identify additional data for indexing, where the additional data is classified as at least one of the protected until first unlock of the computing apparatus data type and the protected when the computing apparatus is locked data type. 
 
     
     
       20. The computer readable storage media of  claim 19 , wherein the program instructions stored on the one or more computer readable storage media, when executed, further cause the at least one processor to:
 receive a key notification indicating that the second index database is not available for indexing the additional data; and 
 mark the additional data as delayed in an indexing queue.